Links to issues initially appear to be broken

Links to the security email threads point to private lists, and so require a login.

If the user is not logged in, there is an error pop-up.
Although it does mention that login is required, the initial impression is that the link is broken.
It might be sensible to warn users, e.g with “(requires login)” after the links.

Start by locating the code that renders links to the security email threads and handles the unauthenticated error pop-up. Confirm the current behavior while logged out, then add the requested “(requires login)” warning to those links. Done means users can tell before clicking that login is required and the existing login prompt still works.

Written by the indexing model from the issue text.